Skip to content
Sign in
8.7 High

CVE-2024-6207 CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and…

Description

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.

Affected products and versions

Product Affected versions Fixed in
ControlLogix® 5580 28.011 No fix stated
ControlLogix® 5580 Process 33.011 No fix stated
GuardLogix 5580 31.011 No fix stated
CompactLogix 5380 28.011 No fix stated
Compact GuardLogix 5380 SIL 2 31.011 No fix stated
Compact GuardLogix 5380 SIL 3 32.013 No fix stated
CompactLogix 5480 32.011 No fix stated
FactoryTalk® Logix Echo 33.011 No fix stated
compactlogix_5380_firmware 36.0 36.0 → < 36.011 36.011
Show the 18 other branches
Product Affected versions Fixed in
compactlogix_5380_firmware 35.0 35.0 → < 35.013 35.013
compactlogix_5380_firmware 34.0 34.0 → < 34.014 34.014
compactlogix_5380_firmware 28.011 28.011 → < 33.017 33.017
controllogix_5580_process_firmware 36.0 36.0 → < 36.011 36.011
controllogix_5580_process_firmware 35.0 35.0 → < 35.013 35.013
controllogix_5580_process_firmware 34.0 34.0 → < 34.014 34.014
controllogix_5580_process_firmware 32.011 32.011 → < 33.017 33.017
guardlogix_5580_firmware 36.0 36.0 → < 36.011 36.011
guardlogix_5580_firmware 35.0 35.0 → < 35.013 35.013
guardlogix_5580_firmware 34.0 34.0 → < 34.014 34.014
guardlogix_5580_firmware 31.011 31.011 → < 33.017 33.017
compact_guardlogix_5380_sil3_firmware 36.0 36.0 → < 36.011 36.011
compact_guardlogix_5380_sil3_firmware 35.0 35.0 → < 35.013 35.013
compact_guardlogix_5380_sil3_firmware 34.0 34.0 → < 34.014 34.014
compact_guardlogix_5380_sil3_firmware 32.013 32.013 → < 33.017 33.017
factorytalk_logix_echo 36.0 36.0 → < 36.011 36.011
factorytalk_logix_echo 35.0 35.0 → < 35.013 35.013
factorytalk_logix_echo 33.011 33.011 → < 34.014 34.014

Other CVEs of ControlLogix® 5580

The 5 CVEs of ControlLogix® 5580 →
CVE-2025-9166 A denial-of-service security issue exists in the affected product and version 8.2 High CVE-2024-6077 A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are… 8.7 High CVE-2024-40619 CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products 8.7 High CVE-2024-5659 Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result… 8.3 High
Track this CVE